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BACKGROUND OF THE INVENTION 

This invention relates generally to a blasting .network -and to a method of 
controlling the operation thereof. 

\ 

For safety reasons a blast controlling system used for remotely controlling a 
blasting network has traditionally been isolated from other networks at a blasting 
site e.g. at a mine; The data on* the blasting system caa however be used to 
monitor- productivity, implement stock control and improve mining methods by 
making blast information available to thtDS.e*wtoo need .such . information. It is also 
possible to schedule and initiate blasts-from a central controllability through a 
suitable blast controlling system. 

Another possibility which arises particularly due to the fact that computers are 
being used as top level system controllers for distributed networks of blasters 
is to make use of a computer network using Internet or Intranet capabilities. 
There are however inherent risks associated with Internet connections. Chief of 
these is the risk that a hacker or unauthorised-user^may^penetrrate4he system 
and deliberately or inadvertently generate* an»uinsafe^0rndarng^oias command 
which can arm and fire the blasting system. This type of action can have 
catastrophic results. \ 

P.18533/bjt 



Page 3 

SUMMARY OF THE INVENTION 

This invention provides a method of controlling a blasting network which includes 
the steps of designating at least one unsafe message, placing a communication 
line to the network in a control mode, monitoring the communication line for the 
unsafe message, and preventing the unbafe message, when detected, from 
reaching the blasting network. 

The unsafe message may be prevented from reaching the blasting network 
simply by ignoring the message and not allowing its onward transmission. 
Alternatively the unsafe message may be scrambled so that -it is no longer in an 
unsafe form. 

"Unsafe message", as used herein, is used to designate a message or command 
which, if received by the blasting network, could result in unwanted or adverse 
conditions or consequences. For example arm and fire commands, if received 
by the blasting network at an unwanted time, could cause a blast to be initiated 
in the presence of personnel and thereby result in death or injury. 

Preferably therefore the method of the invention includes the step of designating 
at least two unsafe messages which respectively are equated with arm and fire 
commands. \ 
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The method may include the steps of placing the communication link in an 
operational mode and, when an unsafe message is detected, of allowing the 
unsafe message to reach the blasting network- 
Unsafe messages may be categorised as legal or illegal. The latter group of 

\ 

messages includes those which are illegally generated, for example those 
messages which arise from any source other than a control unit connected to the 
communication link. Legal messages are then those which are generated by the 
control unit. 

Unsafe messages generated by;the*©©ntrol unitomay^initialKyVbe- scrambled. In 
this instance it falls withih the scope of the method of the invention, when a legal 
unsafe messaged gejaeratednn scrambled-formrand the communication line is 
in an operational mode, to unscramble a scrambled unsafe message, when 
detected, and then to transmit the unscrambled unsafe message to the blasting 
network. 

The invention also provides a system for-controlling >a blasting network which 
includes means for placing a communication line^o thesipetwork in a control 
mode^meansxfor momitoning^he'GommuinieatiopnilineBforisaHeastfone'previously 

designated unsafe message, and means for preventing the unsafe message, 

\ 

when detected, from reaching the blasting network. 
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The unsafe message, when detected, may be ignored or it may be scrambled 
so that it is placed in a safe condition. 

The communication line may be connected to a control unit which is capable of 

generating legal unsafe messages and the system may then include means for 

l 

placing the communication line in an operational mode and means for 
unscrambling a legal scrambled unsafe message, when detected, into an 
unscrambled form and then for transmitting the unscrambled unsafe message 
to the blasting network. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The invention is further described by way of examples with reference to the 
accompanying drawings in which: 

Figure 1 is a block diagram of an electronic blasting system according to the 
invention, 

Figure 2 is a block diagram of a communication fire wall for use in the system 
of Figure 1 , 

Figure 3 is a logical flowchart of the operation of a filter, used in the system of 
Figure 1 , according to a first form of the invention, and 

Figure 4 is a flowchart similar to that shown in Figure 3 for a variation of the 
invention. \ 
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DESCRIPTION OF PREFERRED EMBODIMENT 

When a blasting system is connected to an Intranet or Internetefacility, access 
is provided to information stored in a data base associated with the blasting 
system. This information is useful inter alia to managers, personnel involved in 

\ 

stores and production, seismic monitoring installations, logistical control units, 
etc. 

A perceived risk with a connection, of the aforementioned- kind is that 
unauthorised users may hack through the network security to tamper with the 
blasting system which is a safety critical sys^em^Antunantieipated system fault 
may result in the safety of the system being compromised-and this may lead to 

the blasting system being< fired prematurely whieh can*eauseMnjury or fatalities. 

.* 

Modern networks provide high levels of user security but due to the complexities 
of such systems it is not always possible to carry out a complete exhaustive 
safety analysis of the control software, operating systems and associated fire 
walls. 

Figure 1 of the accompanying drawings, Jllustrates^in bleekt'diagrarn^form a 
system which allows an Internet or Intranet connection to be made to a blasting 
network with improved safety. \ 
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The system includes an Internet or Intranet facility or connection arrangement 
10, a blasting controller or control computer 12 which is used to control and 
activate blasts remotely, a communication fire wall 14, a blasting network 16, 
and a variety of interrogating terminals 18. 

The blasting controller 12 is used in a known manner and includes a standard 
device employed to control the network 16 and to activate the initiation thereof, 
remotely. These aspects are known in the art and hence are not further 
described herein. Similarly the blasting network 16 consists of an assembly of 
detonators and communication devices installed in a known manner at a blasting 
site, making use of known technology. 

The communication fire wall includes a locking device 18 for placing a 
communication line 20 to the blasting network in a control mode, or in an 
operational mode, according to requirement. As used herein the expression 
"locking device" includes any switchable component or mechanism which allows 
the fire wall to be made operational, or to be rendered inoperational, according 
to requirement. The locking device may be operated using a key, by means of 
an electronic keypad requiring a password, or it may be a remotely activated 
switch on a private connection. Thus, in a general sense, the locking device may 
be mechanically or electronically operated. 

\ 
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The remote terminals 1 8 may vary according to requirement The terminals may 
for example provide access, via an Internet connection, to the blasting network 
for managers; 18A, stock controllers 18B, or a seismic monitoring unit 18C. 
These examples are merely illustrative and are not limiting., 

\ 

Figure 2 illustrates further detail of the communication fire wall 14. The filter 
includes communication interfaces 22 and 24 which allow communication to take 
place with the communication line 20, an electronic filter 26 and, in this example, 
a locking.device 1*8 which*consists of a mechanical ©r electronic switch 28 which 
is activated by means of a mechanical ©nelectronio key 30r 

The operation of the electronic filter 26 is described hereinafter with reference 
to Figure 3 and a variation of such operation is described* with reference to 
Figure 4. 

As indicated, by connecting the blasting system 16 to the Internet 10 a potential 
safety risk is introduced due to the possibility being created that hackers can 
penetrate the system. This ^risk* is ^eliminated *by making iuse :of the 
communication fire wall 14 to filter out unsafe or dang^nous^ commands-like arm, 
which; results^in the^blasting 4 ipetw©rk*being armedf^amd^fi^whiGh^Gauses the 
blasting network to be initiated. 

\ - • 
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It is to be noted that the communication medium and protocols used to 
communicate between the blast controlling system and the blasting network may 
be of any appropriate type capable of achieving reliable communication. 

The communication interfaces allow the communication to interface with the 

\ 

electronic components incorporated in the filter 26. These electronic 
components may include a micro controller, programmable logic devices or 
discrete components. The choice of the electronic components is determined 
inter alia by the complexity of the communication protocol which is used. 

Data on the line 20 (block 32) is input to the filter 26. -The filter waits for 
communication (34) and reads each message on the line (36). If a message is 
unsuccessfully read then the system returns to the mode at which it awaits 
communication. 

Once a message is successfully read (block 38) a test is carried out to see if the 
filter 26 has been activated (step 40). As noted the filter is activated by means 
of the mechanical key 30. When the filter is activated it is capable of transmitting 
unsafe or dangerous messages, such as arm and fire commands, which have 
been legally generated by means of the blasting computer 12, to the blasting 
network 16. Thus if the filter has been activated (step 42) any message 
received, regardless of its origin, is collected (block 44) and transmitted via the 
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communication interface 24 as output data (46). The system then reverts to its 
waiting mode at which further messages are awaited. 

On the other hand if the filter is not activated then any message received is 

tested to see whether it is safe or unsafe (step 48). Safe messages are collected 

\ 

and transmitted on the communication line (steps 44 and 46). If an unsafe 
message is detected then it is assumed that this has been illegally generated 
and the message is collected but simply ignored (step 50). The system then 
reverts to the mode at which it waits for further communication. 

If an unsafe or dangerous command is detected then an*alarm*signal f visual or 
audible, is ^generated. A count is 'also kept of the number of dangerous 
messages detected?** 

With the control steps shown in Figure 3 the logic is such that dangerous 
commands which are generated when the filter is in a safe mode are assumed 
to be illegally generated and are ignored. Other messages are transmitted to the 
required destination. The system thus possesses the facility for allowing data 
associated- with*the blasfrnetwork to be accessedrfrom the remote^points 18. The 
data may«be*locatediuat4he blast 

It is however not possible to transmit an unsafe command to the network 16 

\ 

unless the filter 26 has been placed in an Unsafe state i.e. unless the filter has 
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been activated. 

In the logical sequence shown in Figure 4 many of the steps are similar or 
identical to corresponding steps in the sequence shown in Figure 3 and 
consequently bear the same reference numerals. The flowchart shown in Figure 
4 is however intended for use with a blasting controller 12 which scrambles 
dangerous commands. Thus legally generated arm and fire commands, 
produced by the controller 12, are transmitted to the blasting network 16 in a 
scrambled state. 

In the step 40 a test is carried out to see if the filter- 26 is activated or 
deactivated. In the latter case a test is then carried out on the received message 
to see whether it contains an unsafe or dangerous command such as fire or arm 
(step 52). If the command is unsafe then, in step 54, the command is scrambled 
whereafter the scrambled command is collected and transmitted (steps 44 and 
46). 

On the other hand if the received message is safe then no scrambling takes 
place and the message is transmitted in an unscrambled form to its destination. 

If the filter has not been deactivated then, in step 56, a test is carried out to 
determine whether the received message \s safe or unsafe. If the message is 
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unsafe then the received message will be a scrambled fire or arm command. 
The scrambled message is unscrambled (step 58) and is then transmitted to its 
destination. If the message is not a scrambled unsafe message then, in step 52, 
a test is carried out to see if the message is an unsafe message in unscrambled 

form. If the test result is affirmative then it is assumed that the message has 

\ 

been illegally generated and, as before, the message is scrambled (step 54) 
before being transmitted. If the test result is negative then the message is 
transmitted in the received form to its destination. 

It follows that the locking device 18 is used to bypass the filter when it is safe to 
blast:*The bypass is achieved by^hard* wiring the communieaUQniarQund the filter 
or by the filter sensing the status of the^switch and then, based on the status, 
filtering the dangerous commands-out or unscrambling them- 

If the filter has sufficient intelligence then it can send the arm and fire command. 
It would therefore not be possible for an unauthorised user to initiate a blast. 
This could only be achieved by activating the fire wall via the mechanical or 
locking device 18. 

The controfccomputewl 2 may*communieate directly with*the^filt1§r^6*iilf th£re is 
no response from the filter then the control computer will not attempt 

\ 

communication with the blasting network. The filter can thus act as a software 
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t 

dongle. If, as is the case with the Figure 4 embodiment, dangerous legal 
messages are scrambled then the filter must be installed for the system to 
operate. 

It is to be noted that normal commands to query the blasting network and to 
determine the status of components at the blasting site are unaffected. Once the 
blast area is clear the mechanical or electrical key is used to disable the filtering 
action and unblock the commands. The arm and fire commands may now be 
sent through the filter via the blast network to the blasting equipment. The 
control computer will scramble the dangerous commands. The filter, when 
unblocked, will correct the scrambled commands. If the filter is not present the 
scrambled dangerous commands will be sent to the blasting network. The 
blasting network will discard these commands. 

DATED this 20th day of APRIL 1999 
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